{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "color-motion",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Executes local script or command: npx playwright screenshot --wait-for-timeout=500 \"file://$PWD/color.html?t="
    },
    {
      "file": "网络端点",
      "summary": "Declares external network access: npx package resolution: fetches the playwright package from the npm registry if not installed (and downloads the Chromium binary on first run)"
    },
    {
      "file": "本地工作目录",
      "summary": "File I/O and artifact output: Screenshot files such as frame-mid.png / frame-0.png written to current working directory (emitted by playwright, not skill code)."
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查：① 文件清点：skills/color-motion/ = SKILL.md + 2 本 reference + 0 字节 README，**没有 scripts/ 目录**（与正文引用的 `scripts/` 助手形成对照，见 discrepancy 条）；② 全文扫描 URL / npx / curl / fetch / process.env / import：命中 npx playwright 一处（SKILL.md 验收回路）、iart.ai 脚注一处、culori 与 d3-interpolate 的 import 示例各一处，其余为 CSS 代码块；③ 逐条把「外部资源」回查调用点是否存在（playwright 命令在 SKILL.md 原文、culori/d3 在 palettes-and-interpolation.md 原文、ffprobe 在 color-management.md 原文）；④ 与同仓兄弟 skill 的判级口径对齐（logo-animation、remotion-video 同为 npx playwright → 橙）；⑤ meta 数值取自 GitHub API（stars=35、pushed_at=2026-06-22T13:24:17Z）与 skills.sh 仓库页 Installs 列（color-motion=1.1K → 记 1100）。",
    "second_pass": [
      {
        "item": "npx playwright 是否真的写在 SKILL.md（橙档关键证据）",
        "status": "ok",
        "detail": "SKILL.md 的 Verify loop 步骤 4 之后给出该命令原文（含 --wait-for-timeout=500 与 file://$PWD/color.html?t=8）；同段第 3 步要求检查 banding 与浑浊中点。命令是验收回路的组成部分，不是可选项。"
      },
      {
        "item": "正文引用的 scripts/ 助手是否随本 skill 目录分发",
        "status": "discrepancy",
        "detail": "SKILL.md 写「**Packaged helper** (`scripts/`)」，但 pin 目录下 skills/color-motion/ 只有 SKILL.md、references/、0 字节 README —— `scripts/` 实际在**仓库根**（scripts/README.md 自述为 verify-loop toolkit）。因此只装单个 skill 目录的镜像包里该引用悬空；同名写法也出现在 logo-animation、motion-background、remotion-video。对 pin commit 有效，属真实出入。"
      },
      {
        "item": "是否有其他隐藏的执行路径（下载/接口调用）",
        "status": "ok",
        "detail": "全目录搜 curl/wget/fetch/XMLHttpRequest/api/child_process/process.env：零命中；唯一网络相关字符串是 npx 与交付 HTML 的 CDN 说明。"
      },
      {
        "item": "culori / d3-interpolate 是否只是代码示例而非被执行的依赖",
        "status": "ok",
        "detail": "两处 import 均在 references/palettes-and-interpolation.md 的 Perceptual interpolation in code 小节内，作为给实现者抄的片段；skill 无 package.json、无安装步骤、不解析这些模块。"
      },
      {
        "item": "颜色管理结论（QuickTime gamma、四段链路）是否可在源码内验证",
        "status": "unlocatable",
        "detail": "这些是有明确立场的技术断言，但 pin 仓库内没有引用来源、没有测量脚本或样本文件；本次只读侦查也不运行渲染。文中给出的自证方法（50% 灰补丁回读、ffprobe 查 tag）用户可自行复现，故不视为空口断言，但数值本身未在本次核对。"
      },
      {
        "item": "iart.ai 链接的性质",
        "status": "ok",
        "detail": "reference 页脚为署名/营销链接（utm_source=github&utm_content=skill_footer），无跟踪脚本、不参与执行。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "3c129f769d90a1328c209c386492333c9ac62312",
    "sha256": "cb1e39e4a0e5b855530884a8d37169e3900cbb8ed197a3b8a166a8aac8d2046a",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-28/color-motion.tar.gz",
    "sha256": "cb1e39e4a0e5b855530884a8d37169e3900cbb8ed197a3b8a166a8aac8d2046a",
    "commit": "3c129f769d90a1328c209c386492333c9ac62312"
  },
  "original": {
    "github": "https://github.com/iart-ai/motion-design-skills/tree/main/skills/color-motion",
    "path": "skills/color-motion",
    "commit": "3c129f769d90a1328c209c386492333c9ac62312"
  }
}